General
-
Target
2024-03-09_1a2f1f03d9a33a6e08777fc692bb13aa_cryptolocker
-
Size
51KB
-
Sample
240309-cv4ezabf76
-
MD5
1a2f1f03d9a33a6e08777fc692bb13aa
-
SHA1
02dcf95b3326964a6f5c39967123f13b6412e260
-
SHA256
27d8f96a1403a8034f7ed1b5ae98a1c6edbf5c0e52696a23dc2f254c7413bfaa
-
SHA512
f730131c26cfcd3bcf0cd5fc6d74e90876ccfd0bfe15018764b023e89b392a83b64644f7e2588d841fadbafa7f130853617a829a55116708d274cf64a07241ba
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaR:X6QFElP6n+gJBMOtEvwDpjBtExmlp
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-09_1a2f1f03d9a33a6e08777fc692bb13aa_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-09_1a2f1f03d9a33a6e08777fc692bb13aa_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-03-09_1a2f1f03d9a33a6e08777fc692bb13aa_cryptolocker
-
Size
51KB
-
MD5
1a2f1f03d9a33a6e08777fc692bb13aa
-
SHA1
02dcf95b3326964a6f5c39967123f13b6412e260
-
SHA256
27d8f96a1403a8034f7ed1b5ae98a1c6edbf5c0e52696a23dc2f254c7413bfaa
-
SHA512
f730131c26cfcd3bcf0cd5fc6d74e90876ccfd0bfe15018764b023e89b392a83b64644f7e2588d841fadbafa7f130853617a829a55116708d274cf64a07241ba
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaR:X6QFElP6n+gJBMOtEvwDpjBtExmlp
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-